Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions, such as creating new admin accounts.


This issue was fixed in the versions specified in the affected products list.

The vulnerability identified as CVE-2025-67651 affects multiple PHP Jabbers scripts and stems from the absence of CSRF protections such as tokens or SameSite cookie attributes. This enables attackers to craft unauthorized requests that execute in the context of an authenticated user session, potentially leading to unauthorized administrative actions like adding new admin accounts. The vulnerability is classified under CWE-352 (Cross-Site Request Forgery). According to the provided data, fixed versions exist, though specific version numbers are not detailed.

Detailed information about A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. (CVE-2025-67651). Get real-tim

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. (CVE-2025-67651) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-67651: CWE-352 Cross-Site Request Forgery (CSRF) in PHP Jabbers Appointment Scheduler

A Cross-Site Request Forgery (CSRF) vulnerability exists in multiple PHP Jabbers Appointment Scheduler scripts due to missing CSRF tokens or appropriate SameSite cookie attributes. This flaw allows attackers to perform unauthorized actions on behalf of authenticated users, including creating new administrative accounts. The vulnerability has a medium severity score of 6.9 and has been assigned CVE-2025-67651. The issue is known and published but no specific affected versions or patches have been provided in the available data.

CVE-2025-67651 is a CSRF vulnerability in PHP Jabbers Appointment Scheduler where the absence of CSRF tokens or proper SameSite cookie attributes enables attackers to send unauthorized requests within the context of an authenticated user session. This can lead to unauthorized administrative actions such as creating new admin accounts. The vulnerability has a CVSS 4.0 base score of 6.9 (medium severity). Although the description states that the issue was fixed in certain versions, no explicit affected versions or patch details are provided in the input data. No known exploits in the wild have been reported.

Detailed information about CVE-2025-67651: CWE-352 Cross-Site Request Forgery (CSRF) in PHP Jabbers Appointment Scheduler affecting PHP Jabbers Appointment Sche

CVE-2025-67651: CWE-352 Cross-Site Request Forgery (CSRF) in PHP Jabbers Appointment Scheduler - Live Threat Intelligence - Threat Radar | OffSeq.com


CVE-2025-67651: CWE-352 Cross-Site Request Forgery (CSRF) in PHP Jabbers Appointment SchedulerCVE-2025-67651 0 A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions, such as creating new admin accounts. This issue was fixed in the versions specified in the affected products list. MediumVulnerability#gcve #osv #ghsa-57h4-c69h-52fm Join the discussion	GCVE Database	07/31/2026, 11:40:44 UTC Added: 07/31/2026, 15:37:32 UTC
CVE-2025-67651: CWE-352 Cross-Site Request Forgery (CSRF) in PHP Jabbers Appointment SchedulerCVE-2025-67651 0 A Cross-Site Request Forgery (CSRF) vulnerability exists in multiple PHP Jabbers Appointment Scheduler scripts due to missing CSRF tokens or appropriate SameSite cookie attributes. This flaw allows attackers to perform unauthorized actions on behalf of authenticated users, including creating new administrative accounts. The vulnerability has a medium severity score of 6.9 and has been assigned CVE-2025-67651. The issue is known and published but no specific affected versions or patches have been provided in the available data. MediumVulnerability#cve #cve-2025-67651 #cwe-352 Join the discussion	CVE Database V5	07/31/2026, 11:40:44 UTC Added: 07/31/2026, 11:58:36 UTC

Threats Tagged 'cve-2025-67651'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-67651'

Lead Pen Test Professional